Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3138302e302f32322d3232203d3e203238323230.roa
File:                     3138372e36312e3138302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          cj8fvB9T7OMmy6RbMo1p9O+ocJACwypjOhiLYfKASnw=
Subject key identifier:   CB:DD:7B:81:47:3D:DF:38:7B:F1:18:0F:89:17:52:05:A2:74:09:F0
Certificate issuer:       /CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
Certificate serial:       39E46B258E40A7C2964EEADEE174B3F567FC2759
Authority key identifier: 30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3138302e302f32322d3232203d3e203238323230.roa
Signing time:             Tue 12 Mar 2024 19:51:24 +0000
ROA not before:           Tue 12 Mar 2024 19:46:24 +0000
ROA not after:            Tue 11 Mar 2025 19:51:24 +0000
asID:                     28220
IP address blocks:        187.61.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e4:6b:25:8e:40:a7:c2:96:4e:ea:de:e1:74:b3:f5:67:fc:27:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301D20FC8F436C3D677298FA412C8E31FAD084F8
        Validity
            Not Before: Mar 12 19:46:24 2024 GMT
            Not After : Mar 11 19:51:24 2025 GMT
        Subject: CN=CBDD7B81473DDF387BF1180F89175205A27409F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:87:3f:87:95:43:1b:ba:6f:12:c7:72:88:c8:
                    c6:05:bb:bd:bf:f7:3a:1f:1b:f7:9b:03:63:05:bc:
                    04:97:ae:ac:ad:37:e0:f4:9c:19:99:f5:8f:5e:35:
                    69:9b:9e:e2:86:14:dd:4d:a6:df:83:b3:10:11:87:
                    0c:36:06:4f:35:bc:7e:f5:8f:a7:cc:ff:d4:a6:d5:
                    69:e6:5b:16:95:bb:a9:a0:f0:03:bf:f8:ee:20:cd:
                    b3:82:e9:5c:26:e7:f8:18:c9:0c:24:b0:b6:3e:59:
                    5f:92:1f:da:a4:fc:90:39:c5:b1:e7:e1:d8:5e:32:
                    8c:72:8a:ce:3b:b5:9e:ff:1b:7c:1c:db:65:96:7c:
                    55:ea:9b:37:5d:95:0c:b0:cd:36:fa:15:16:35:a8:
                    7a:bf:7a:f5:f7:c4:bd:90:ed:d1:3e:ef:82:ce:f1:
                    85:94:1b:12:8a:33:02:06:49:af:63:31:bc:a0:a6:
                    d4:0b:bc:44:0a:c8:2b:4c:a1:cd:9f:c6:c5:c6:f9:
                    5d:99:22:08:55:ef:08:ff:1f:a3:5f:bd:e4:7a:3b:
                    97:6a:3d:9a:a7:a6:96:55:2d:3a:e7:93:3a:4a:6b:
                    5e:17:bb:de:d3:28:ee:3f:23:1d:a5:af:10:d7:92:
                    fb:61:08:46:50:1f:de:cd:bc:01:18:c8:91:b3:f4:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DD:7B:81:47:3D:DF:38:7B:F1:18:0F:89:17:52:05:A2:74:09:F0
            X509v3 Authority Key Identifier:
                keyid:30:1D:20:FC:8F:43:6C:3D:67:72:98:FA:41:2C:8E:31:FA:D0:84:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/301D20FC8F436C3D677298FA412C8E31FAD084F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/3138372e36312e3138302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:85:8c:aa:1a:a4:42:3b:8c:20:3b:ed:88:ea:ef:3f:a4:a6:
         a6:f3:06:c4:a8:5b:fa:bc:9e:3e:dd:63:43:e1:93:df:80:e8:
         d5:37:3d:9a:1c:6b:4c:b6:63:87:15:91:f7:4a:ef:fd:55:a0:
         49:2f:d4:1b:45:2d:37:33:92:7e:d0:f9:d6:1b:a1:c1:39:2b:
         82:43:07:04:a8:0c:35:de:ce:76:ef:03:fb:8f:f1:c4:f8:cd:
         5f:60:f9:ca:2c:05:bb:ee:66:b9:95:f6:2c:a6:73:98:e3:9e:
         e7:6d:8f:6d:05:c7:d4:0f:f1:4f:48:22:50:25:81:59:03:bd:
         30:a8:e6:cd:f5:73:48:64:f3:14:72:c1:ef:53:85:1f:7b:f0:
         56:74:d7:20:77:cf:49:11:fa:9b:e3:f0:36:1c:bd:fe:36:2c:
         b8:01:f2:12:ae:d6:0f:9f:96:ca:83:09:46:f0:a7:34:c9:02:
         9b:38:90:79:b0:17:71:13:5c:fe:cc:ee:72:b2:61:05:07:f0:
         f3:53:d5:76:28:d2:e1:52:3b:ec:d4:e1:0c:1a:05:47:80:d4:
         a9:02:87:3d:62:e3:79:f1:cb:8a:c5:40:89:c7:87:d3:16:51:
         a5:7a:90:d7:06:b8:a0:3b:38:0d:f1:62:4c:98:08:58:44:17:
         bd:6e:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org